Skip to content

Privacy Policy

This Privacy Policy describes how Obscur Systems LLC (“Obscur”, “we”) handles personal data in connection with the Anthracite platform. We are the controller for the account, billing, and usage data described here. Data you store inside your instances (“Customer Data”) is handled separately: we process it only to operate the service or on your instructions, as described under Customer Data below and in our Terms of Service.

  • Account data — the email address used to authenticate, and any name or organization you provide.
  • Billing data — payment details and transaction history, handled by our payment processor; we do not store full card numbers.
  • Usage and telemetry — the instances you provision, their engine, size, and region, plus operational metrics and logs needed to run and secure the platform.
  • Support communications — messages you send us and our replies.
  • Essential cookies — a session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

We use personal data to authenticate you, provision and operate your instances, bill you, secure the platform, respond to support requests, and meet legal obligations. We do not sell personal data.

The data you write into your databases is Customer Data. We access it only as needed to operate and secure the service, or on your instructions. This Privacy Policy covers the personal data we control as a company; it does not govern the contents of your instances, which remain yours.

We share personal data with service providers who help us run Anthracite — our infrastructure and hosting providers and our payment processor — under contracts that restrict their use of the data to providing services to us. We may disclose data where required by law. A current list of our service providers is available on request at support@anthracite.dev.

We retain account and billing data for as long as your account is active and as required for legal, tax, and accounting purposes. When you close your account, we delete or anonymize personal data after the export window described in our Terms, subject to those retention requirements.

We protect personal data with encryption in transit and at rest, network isolation between customers, least-privilege internal access, and audit logging. No system is perfectly secure, but we work to keep our safeguards current.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Residents of the EEA and UK have rights under the GDPR; California residents under the CCPA/CPRA. To exercise any right, email support@anthracite.dev; we will respond within the time the law requires.

We may process personal data in countries other than your own. Where we transfer data out of the EEA or UK, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

We may update this policy from time to time. Material changes will be announced in the control plane or by email. The “last updated” date above reflects the current version.

Privacy questions? Email support@anthracite.dev. Obscur Systems LLC.